CWE-427.

Binary hijack in SAP BusinessObjects Business Intelligence (Installer)

• SAP_SE SAP BusinessObjects Business Intelligence (Installer)
• CWE-427

CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries

• CODESYS Development System
• CWE-427

Incomplete verification of installation file signature

• Arm Ltd Arm Compiler 5 (AC5), Arm Compiler for Embedded 6 (AC6), Fast Models (FM), Arm Compiler for Embedded FuSA (ACEF), Arm Development Studio (ADS), Arm Forge (AF), Arm Mobile Studio (AMS), DS-5 Development Studio, Fast Models (FM), GNU Toolchain (GT), Keil MDK (KMDK), Mbed Studio (MS)
• CWE-427

Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability

• Tenable.io
• Tenable Nessus
• CWE-427

Uncontrolled search path in Synology DiskStation Manager (DSM) and others

• Synology DiskStation Manager (DSM)
• Synology Unified Controller (DSMUC)
• CWE-427

Uncontrolled search path in Trellix Agent

• Trellix Agent
• CWE-427

Captura CRYPTBASE.dll uncontrolled search path

• Captura
• CWE-427

Uncontrolled search path in Dell PowerPath Windows

• Dell PowerPath Windows
• CWE-427

Uncontrolled search path in Intel(R) Trace Analyzer and Collector

• Intel(R) Trace Analyzer and Collector
• CWE-427

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution.

• CWE-427

Uncontrolled search path in Autodesk InfraWorks

• Autodesk InfraWorks
• CWE-427

Uncontrolled search path in WULT software maintained by Intel(R)

• WULT software maintained by Intel(R)
• CWE-427

Uncontrolled search path in DSP Builder software installer for Intel(R) FPGAs Pro Edition

• DSP Builder software installer for Intel(R) FPGAs Pro Edition
• CWE-427

Uncontrolled search path in Intel(R) Quartus(R) Prime Pro edition software

• Intel(R) Quartus(R) Prime Pro edition software
• CWE-427

Uncontrolled search path in Intel(R) MacCPUID software

• Intel(R) MacCPUID software
• CWE-427

Uncontrolled search path in Intel(R) NUC Chaco Canyon BIOS update software

• Intel(R) NUC Chaco Canyon BIOS update software
• CWE-427

Uncontrolled search path in Intel(R) Unite(R) Plugin SDK

• Intel(R) Unite(R) Plugin SDK
• CWE-427

Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers

• Intel(R) oneAPI Toolkit and component software installers
• CWE-427

Uncontrolled search path in Intel(R) DCM software

• Intel(R) DCM software
• CWE-427

Uncontrolled search path in Intel(R) NUC Pro Software Suite

• Intel(R) NUC Pro Software Suite
• CWE-427

Uncontrolled search path in Intel(R) HDMI Firmware Update tool for NUC

• Intel(R) HDMI Firmware Update tool for NUC
• CWE-427

Uncontrolled search path in Intel(R) Pathfinder for RISC-V software

• Intel(R) Pathfinder for RISC-V software
• CWE-427

Uncontrolled search path in Intel(R) NUC P14E Laptop Element software for Windows 10

• Intel(R) NUC P14E Laptop Element software for Windows 10
• CWE-427

Uncontrolled search path in Intel(R) VTune(TM) Profiler software

• Intel(R) VTune(TM) Profiler software
• CWE-427

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.

• CWE-427

Uncontrolled search path in Acronis Snap Deploy

• Acronis Snap Deploy
• CWE-427

Git CMD erroneously executes `doskey.exe` in the current directory, if it exists

• git
• CWE-427

Git for Windows's config file of `connect.exe` is susceptible to malicious placing

• git
• CWE-427

Uncontrolled search path in Schneider Electric Easergy Builder Installer

• Schneider Electric Easergy Builder Installer
• CWE-427

Executable Hijacking

• Qualys Cloud Agent
• CWE-427

DLL Hijacking vulnerability in SapSetup (Software Installation Program)

• SapSetup (Software Installation Program)
• CWE-427

KMPlayer SHFOLDER.dll uncontrolled search path

• KMPlayer
• CWE-427

Local Elevation of Privilege in M-Files

• M-Files
• CWE-427

Uncontrolled search path in AVEVA Edge

• AVEVA Edge
• CWE-427

Uncontrolled search path in AVEVA Edge

• AVEVA Edge
• CWE-427

Uncontrolled search path in AVEVA Edge

• AVEVA Edge
• CWE-427

Local Privilege Escalation in Zoom for macOS Installers

• Zoom Video Communications Inc Zoom Client for Meetings for IT Admin macOS installers
• CWE-427

Apache OpenOffice: Empty entry in Java class path

• Apache Software Foundation Apache OpenOffice
• Code injection
• CWE-427

An issue was discovered in Veritas NetBackup before 10.0 on Windows.

• CWE-427

ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which…

• CWE-427

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL.

• CWE-427

Uncontrolled search path in Tenable.io, Tenable.sc and Nessus

• Tenable.io, Tenable.sc and Nessus
• CWE-427

McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading.

• CWE-427

Uncontrolled search path in Trend Micro, Inc. Trend Micro Apex One

• Trend Micro, Inc. Trend Micro Apex One
• CWE-427

Uncontrolled search path in Trend Micro, Inc. Trend Micro Apex One

• Trend Micro, Inc. Trend Micro Apex One
• CWE-427

Uncontrolled search path in IVM Development Group pg_ivm

• IVM Development Group pg_ivm
• CWE-427

In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.

• CWE-427

Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation.

• CWE-427

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.

• CWE-427

Privilege escalation via manipulated unixcat executable

• Tribe29 Checkmk
• CWE-427

Uncontrolled search path in NVIDIA GeForce Experience

• NVIDIA GeForce Experience
• CWE-427

BIG-IP Edge Client for Windows vulnerability

• F5 APM Clients
• CWE-427

BIG-IP Edge Client for Windows vulnerability

• F5 APM Clients
• CWE-427

Uncontrolled search path in Dell OpenManage Server Administrator (OMSA)

• Dell OpenManage Server Administrator (OMSA)
• CWE-427

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation.

• CWE-427

Uncontrolled search path in Windscribe

• Windscribe
• CWE-427

Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elev…

• CWE-427

Bloom Uncontrolled Search Path Element vulnerability

• CWE-427

<3.3.1 · fixed in 3.3.1

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate privileges to SYSTEM via DLL planting in…

• CWE-427

Local Privilege Escalation in Zoom Rooms for Windows Installers

• Zoom Video Communications Inc Zoom Rooms for Windows
• CWE-427